عرض عملي: استغلال وإصلاح الإسناد الجماعي وSSRF

خطوة بخطوة

1. On the vulnerable branch, register with "role":"ADMIN" in the body and become an admin.
2. Fix with a RegisterRequest DTO; the extra field is now ignored.
3. Call the "import product image from URL" feature with an internal address; see data returned.
4. Planned mistake: a deny-list for localhost is bypassed with 127.0.0.1 or a redirect. Fix: an allow-list of hosts and resolved-address checks.
5. Add one regression test for each fix.